$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3d780d83-be6a-37e7-9d02-814826bc0a03.roa File: 3d780d83-be6a-37e7-9d02-814826bc0a03.roa (raw, json) Hash identifier: rSXwMXl7/kVyvK8itqy8ZT11p2po7wfs+/oumxnYbb0= Subject key identifier: B1:83:7E:0E:E8:D8:62:7F:29:95:91:B1:E6:33:5B:CC:9B:01:0C:9D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D492A7DAB4C32D37C896A3380 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3d780d83-be6a-37e7-9d02-814826bc0a03.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 215595 IP address blocks: 23.231.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:7d:ab:4c:32:d3:7c:89:6a:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=495eaf3f-d14e-4c9a-84bc-26cc7394f288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:90:4e:9c:02:73:ba:e6:ec:70:81:22:7a: 23:68:c1:0c:15:eb:53:77:87:f3:b6:49:ef:23:f2: af:e2:a3:44:22:8f:4c:8d:16:47:60:b8:76:3d:65: 9c:a0:73:b8:08:43:23:12:0b:85:36:7a:51:e1:fc: 14:13:2c:cd:4d:ad:08:88:64:90:ae:db:c7:d6:66: 26:f5:25:81:62:72:a2:c2:f3:66:85:eb:42:c9:d8: 66:c9:b5:45:61:cf:2d:ab:ae:e9:bc:04:18:e5:55: 36:1c:eb:f8:bb:aa:24:ae:cf:04:1c:9f:3b:6e:e3: c1:7a:80:05:05:f4:bc:c0:53:11:32:70:d1:76:08: 50:16:71:6d:c8:75:ff:5c:08:1e:25:46:73:6e:f6: 7c:f7:2b:2d:0c:87:fb:7f:f7:ec:1a:d0:ce:cc:ae: d9:02:62:a8:cc:d8:71:77:2a:42:ae:36:9b:70:df: f3:8b:44:8a:36:ca:8b:66:c6:ab:df:2f:46:7a:47: 04:e4:91:9e:92:8a:48:4b:4d:f8:09:23:79:6d:5f: 90:3c:b1:41:4f:2c:76:d6:84:8c:a6:e9:50:8d:39: 60:2f:40:86:17:a6:26:29:86:c4:43:41:e0:c5:94: 9a:43:e5:97:5e:1d:21:34:b0:b6:1b:12:f4:02:55: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:7E:0E:E8:D8:62:7F:29:95:91:B1:E6:33:5B:CC:9B:01:0C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3d780d83-be6a-37e7-9d02-814826bc0a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bf:0b:3e:b3:4d:70:a6:4e:3d:e0:a9:5b:59:23:76:dd:11: b2:d2:e3:4f:37:98:a8:1f:8c:4c:f5:f9:8b:ca:60:e9:1d:20: 34:c3:97:28:fb:65:34:4e:9b:66:2e:c5:b9:aa:03:02:78:58: e4:64:f9:d4:c4:be:5d:28:86:5d:cc:ee:1d:29:3b:00:18:7b: ad:b6:46:fa:60:f2:5c:07:4d:51:c7:e3:9b:6d:fc:ce:bd:f0: 0a:63:63:b3:25:f7:e0:7f:ab:6e:95:a2:af:17:de:20:ab:f3: 7a:20:d9:b0:29:8b:49:d9:65:7a:b2:67:66:f4:d9:eb:7b:9b: 9b:ae:75:a8:42:97:73:ad:1f:8e:da:57:dc:b2:26:6d:4e:fe: 58:c1:80:79:e3:e7:85:95:92:f8:97:1e:96:23:bf:7d:41:ac: 7e:eb:12:73:71:62:7a:c1:ee:25:d4:67:41:59:6d:08:8b:77: e2:6f:33:d4:71:32:ab:c9:1b:7b:50:8c:0f:80:4f:bd:a7:62: 46:42:bd:f2:8e:0c:01:89:8b:0c:65:0f:66:8a:94:35:68:d0: 58:1d:a7:fc:3f:24:4f:98:fa:9a:41:16:c9:d1:af:7e:5f:5e: 6c:25:b8:59:c0:80:dc:96:82:8d:c4:0d:70:1e:d6:9b:de:91: e0:d8:ad:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKn2rTDLTfIlqM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NDk1ZWFmM2YtZDE0ZS00YzlhLTg0YmMtMjZjYzczOTRmMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0qQTpwCc7rm7HCBInojaMEMFetTd4fztknv I/Kv4qNEIo9MjRZHYLh2PWWcoHO4CEMjEguFNnpR4fwUEyzNTa0IiGSQrtvH1mYm 9SWBYnKiwvNmhetCydhmybVFYc8tq67pvAQY5VU2HOv4u6okrs8EHJ87buPBeoAF BfS8wFMRMnDRdghQFnFtyHX/XAgeJUZzbvZ89ystDIf7f/fsGtDOzK7ZAmKozNhx dypCrjabcN/zi0SKNsqLZsar3y9GekcE5JGekopIS034CSN5bV+QPLFBTyx21oSM pulQjTlgL0CGF6YmKYbEQ0HgxZSaQ+WXXh0hNLC2GxL0AlXz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGDfg7o2GJ/KZWRseYzW8ybAQydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvM2Q3ODBkODMtYmU2YS0z N2U3LTlkMDItODE0ODI2YmMwYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+d0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa/Cz6zTXCmTj3gqVtZI3bdEbLS4083mKgfjEz1+YvKYOkdIDTDlyj7 ZTROm2YuxbmqAwJ4WORk+dTEvl0ohl3M7h0pOwAYe622Rvpg8lwHTVHH45tt/M69 8ApjY7Ml9+B/q26Voq8X3iCr83og2bApi0nZZXqyZ2b02et7m5uudahCl3OtH47a V9yyJm1O/ljBgHnj54WVkviXHpYjv31BrH7rEnNxYnrB7iXUZ0FZbQiLd+JvM9Rx MqvJG3tQjA+AT72nYkZCvfKODAGJiwxlD2aKlDVo0Fgdp/w/JE+Y+ppBFsnRr35f XmwluFnAgNyWgo3EDXAe1pvekeDYreU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:40 2026 by rpki-client